Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupalThe menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers...CVE-2008-17295.8 Medium
- drupal ubercart moduleMultiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7...CVE-2008-14284.3 Medium
- drupalThe Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in...CVE-2008-11334.3 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to...CVE-2008-11313.5 Low
- drupal header imageUnspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote...CVE-2008-082310.0 High
- drupal project issue tracking moduleThe Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and...CVE-2008-05776.4 Medium
- drupal project issue tracking moduleCross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before...CVE-2008-05764.3 Medium
- drupal userpoints moduleThe point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5...CVE-2008-05714.3 Medium
- drupal openidThe OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned...CVE-2008-05705.0 Medium
- drupal comment upload moduleThe Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not...CVE-2008-05696.4 Medium
- drupal secure site moduleUnspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1...CVE-2008-056810.0 High
- drupal workflowCross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5...CVE-2008-04634.3 Medium
- drupal, drupal archive module +1 moreCross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal...CVE-2008-04624.3 Medium
- drupal fileshare moduleUnspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users...CVE-2008-02778.5 High
- drupalCross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows...CVE-2008-02764.3 Medium
- drupal atom moduleThe Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage...CVE-2008-02755.0 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess...CVE-2008-02742.6 Low
- drupalInterpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer...CVE-2008-02734.3 Medium
- drupalCross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4...CVE-2008-02724.3 Medium
- drupal bueditorThe editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for...CVE-2008-02714.3 Medium
- drupal meta tags moduleUnspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images...CVE-2008-02646.8 Medium
- drupal feature moduleFeature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms...CVE-2007-63204.3 Medium
- drupalMultiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5...CVE-2007-62997.5 High
- drupal shoutboxCross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5...CVE-2007-62984.3 Medium
- drupal, drupal fullname field for cck, token module +7 more +9 moreMultiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x...CVE-2007-56213.5 Low
- drupalThe hook_comments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication...CVE-2007-55974.3 Medium
- drupalThe core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension...CVE-2007-55964.3 Medium
- drupalCRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x...CVE-2007-55955.1 Medium
- drupal, fedoraproject fedora +1 moreDrupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion...CVE-2007-55944.3 Medium
- drupal, fedoraproject fedora +1 moreinstall.php in Drupal 5.x before 5.3, when the configured database server is not reachable,...CVE-2007-55936.8 Medium
- drupalDrupal 5.2 and earlier does not properly unset variables when the input data includes a numeric...CVE-2007-5416Public exploit6.8 Medium
- drupal project issue trackingCross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue...CVE-2007-52283.5 Low
- drupal project, project issue tracking module +1 moreThe Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking...CVE-2007-44365.0 Medium
- drupal content construction kitMultiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content...CVE-2007-43634.3 Medium
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4...CVE-2007-40644.3 Medium
- drupalMultiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote...CVE-2007-40634.3 Medium
- drupal logintoboggan moduleCross-site scripting (XSS) vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712...CVE-2007-38183.5 Low
- drupal logintoboggan moduleCross-site scripting (XSS) vulnerability in the LoginToboggan module 4.7.x-1.0, 4.7.x-1.x-dev,...CVE-2007-38174.3 Medium
- drupal forward moduleThe Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to...CVE-2007-36907.8 High
- drupal print moduleThe Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read...CVE-2007-36897.8 High
- drupal database administration moduleMultiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba)...CVE-2007-21607.5 High
- drupal database administration moduleMultiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4...CVE-2007-21594.3 Medium
- drupal project issue trackingThe Project issue tracking module before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x...CVE-2007-13683.5 Low
- drupal nodefamilyUnspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote...CVE-2007-13606.0 Medium
- drupal imce moduleDirectory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module,...CVE-2006-71105.5 Medium
- drupal imce moduleUnrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote...CVE-2006-71096.5 Medium
- drupal audio module, getid3, mediafield module +2 moreUnspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the...CVE-2007-10357.5 High
- drupal secure site moduleUnspecified vulnerability in the Secure site 4.7.x-1.x-dev and 5.x-1.x-dev module for Drupal...CVE-2007-10337.5 High
- drupal, drupal textimage +1 moreThe (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2)...CVE-2007-06585.0 Medium
- drupalThe comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5...CVE-2007-06266.5 Medium
- Show moreLoading…